Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SYSNET/0/3230322e33392e39362e302f32302d3234203d3e2034373833.roa
File: 3230322e33392e39362e302f32302d3234203d3e2034373833.roa (raw, json)
Hash identifier: Olj5ogCJ+KENEHzp0UId7+1QWnhfQbZROWFWrZJLsV4=
Subject key identifier: 96:12:67:FF:D1:84:CE:2D:AE:68:E2:E7:01:B2:10:5B:FA:40:0F:34
Certificate issuer: /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial: 01CDB388C8EC57782B80B13B53E0899A1A5EC88B
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYSNET/0/3230322e33392e39362e302f32302d3234203d3e2034373833.roa
Signing time: Mon 11 May 2026 16:54:23 +0000
ROA not before: Mon 11 May 2026 16:49:23 +0000
ROA not after: Mon 10 May 2027 16:54:23 +0000
asID: 4783
IP address blocks: 202.39.96.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:cd:b3:88:c8:ec:57:78:2b:80:b1:3b:53:e0:89:9a:1a:5e:c8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Validity
Not Before: May 11 16:49:23 2026 GMT
Not After : May 10 16:54:23 2027 GMT
Subject: CN=961267FFD184CE2DAE68E2E701B2105BFA400F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:6c:72:d5:18:b8:f7:e6:29:32:1f:6e:77:
e9:cc:61:8e:ad:06:f5:6e:be:de:0b:5b:b9:93:8b:
3e:6c:28:5f:d1:ea:3e:5a:e7:b2:01:af:7d:d4:55:
55:bb:9c:a7:11:94:5f:4a:54:dc:e8:e3:c2:62:ed:
8d:c2:7a:bf:51:a5:8a:b1:09:03:21:28:c0:48:aa:
02:e7:b0:71:89:87:63:7d:c5:d0:d2:68:ac:ab:3b:
f2:9e:5b:7f:70:d1:36:5d:5c:e9:6d:2e:db:74:da:
58:43:68:2f:33:33:6d:dc:cd:92:28:97:e9:7f:aa:
86:b1:a0:22:64:17:f9:d9:5a:67:9f:1e:81:3c:44:
a8:3c:54:9d:42:0f:3b:2e:67:fd:e9:ea:70:0a:6a:
a9:a7:f7:2a:a3:da:ad:89:0f:be:00:28:6d:c1:98:
ae:b3:d9:21:65:24:74:6e:a5:33:77:61:7e:29:ab:
62:a0:2b:99:38:f6:89:12:f3:77:ed:d4:58:40:c8:
64:b8:be:06:d8:60:7a:b9:f5:b7:20:69:8b:5f:57:
a4:4c:43:1e:8c:ff:83:93:1c:21:ff:8f:3a:43:da:
0b:b3:a7:26:aa:29:a6:f1:cd:5e:7a:70:11:aa:32:
b9:a6:79:95:e2:d7:29:94:df:38:d8:9b:02:ba:61:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:67:FF:D1:84:CE:2D:AE:68:E2:E7:01:B2:10:5B:FA:40:0F:34
X509v3 Authority Key Identifier:
keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/3230322e33392e39362e302f32302d3234203d3e2034373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.39.96.0/20
Signature Algorithm: sha256WithRSAEncryption
19:77:db:2a:ac:92:61:bc:c6:12:8a:99:ef:79:47:86:44:8d:
04:b0:d5:d7:9d:73:32:70:c0:73:b7:22:95:7b:a0:ec:53:fd:
5d:03:aa:13:2f:00:4b:86:f5:bb:fb:33:cf:a5:cf:c5:be:12:
1c:ad:e0:fb:63:98:a2:83:3b:97:3d:bf:91:f6:f7:33:48:9b:
1e:8e:81:e4:4d:91:84:f6:f5:3c:7e:0e:41:09:47:15:80:9a:
4e:2e:95:94:c2:96:cb:8f:a6:44:33:8e:93:35:55:10:d3:49:
62:bd:bb:73:f3:b7:ce:b6:ff:a5:52:66:5b:52:96:d0:3c:e0:
c9:a0:96:22:b8:7e:5d:cd:49:eb:8e:c9:f1:cb:0b:e0:f6:10:
49:b4:b2:08:85:41:2d:da:09:f4:4c:89:ea:db:03:72:c7:78:
ea:ce:fe:e5:11:2c:5b:36:ea:4b:61:fa:3b:40:de:5a:db:9b:
54:94:13:8d:b0:0d:18:6f:fb:84:b5:a4:40:a2:36:97:58:35:
c9:94:77:f7:22:44:34:3f:f8:33:b0:fd:1f:17:16:be:b3:80:
8f:91:ff:33:50:df:77:1e:25:e2:ff:b8:d7:ac:04:69:e9:1e:
16:c2:f5:09:c3:44:43:59:da:3f:ae:6e:20:dd:34:8b:3c:da:
91:0d:f4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:59:40 2026 by rpki-client